Puppet Enterprise CVE-2013-4971 Information Disclosure Vulnerability

Bugtraq ID:	65993
Class:	Design Error
CVE:	CVE-2013-4971
Remote:	Yes
Local:	No
Published:	Mar 04 2014 12:00AM
Updated:	Mar 04 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Puppetlabs Puppet Enterprise 3.1.3 Puppetlabs Puppet Enterprise 3.1.2 Puppetlabs Puppet Enterprise 3.1 Puppetlabs Puppet Enterprise 3.0.1 Puppetlabs Puppet Enterprise 3.0 Puppetlabs Puppet Enterprise 2.8.3 Puppetlabs Puppet Enterprise 2.8.2 Puppetlabs Puppet Enterprise 2.7.2 Puppetlabs Puppet Enterprise 2.7.1 Puppetlabs Puppet Enterprise 2.7 Puppetlabs Puppet Enterprise 2.5.2 Puppetlabs Puppet Enterprise 2.5.1 Puppetlabs Puppet Enterprise 2.0.3 Puppetlabs Puppet Enterprise 2.0.2 Puppetlabs Puppet Enterprise 1.2.7 Puppetlabs Puppet Enterprise 3.1.1 Puppetlabs Puppet Enterprise 3.0 Puppetlabs Puppet Enterprise 2.8.4 Puppetlabs Puppet Enterprise 2.8.0 Puppetlabs Puppet Enterprise 2.6 Puppetlabs Puppet Enterprise 1.2 Puppetlabs Puppet Enterprise 1.1 Puppetlabs Puppet Enterprise 1.0 Puppetlabs Puppet Enterprise 2.0
Not Vulnerable:	Puppetlabs Puppet Enterprise 3.2

Puppet Enterprise CVE-2013-4971 Information Disclosure Vulnerability

Puppet Enterprise is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.

Puppet Enterprise prior to 3.2.0 are vulnerable.